Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafana-pcpUpgrade oci-seccomp-bpf-hookUpgrade delveUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade container-selinuxUpgrade podman-pluginsUpgrade skopeoUpgrade containers-commonUpgrade golang-testsUpgrade skopeo-testsUpgrade toolboxUpgrade grafanaUpgrade criu-libsUpgrade python3-podmanUpgrade crunUpgrade libslirp-develUpgrade criu-develUpgrade conmonUpgrade golang-raceUpgrade podmanUpgrade golang-binUpgrade cockpit-podmanUpgrade go-toolsetUpgrade buildahUpgrade golang-miscUpgrade podman-testsUpgrade podman-catatonitUpgrade podman-dockerUpgrade python3-criuUpgrade runcUpgrade podman-gvproxyUpgrade golangUpgrade libslirpUpgrade toolbox-testsUpgrade buildah-testsUpgrade aardvark-dnsUpgrade netavarkUpgrade criuUpgrade fuse-overlayfsUpgrade golang-docsUpgrade critUpgrade git-lfsUpgrade slirp4netnsUpgrade udicaUpgrade golang-src | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade go-srpm-macrosUpgrade golang-github-godbus-dbus-develUpgrade golang-sharedUpgrade go-filesystemUpgrade golang-googlecode-net-develUpgrade runcUpgrade golang-docsUpgrade golang-binUpgrade golang-googlecode-sqlite-develUpgrade go-rpm-macrosUpgrade golang-github-gorilla-mux-develUpgrade golang-srcUpgrade golist-debuginfoUpgrade golang-github-syndtr-gocapability-develUpgrade golangUpgrade go-rpm-templatesUpgrade runc-debuginfoUpgrade golang-github-gorilla-context-develUpgrade golang-miscUpgrade golistUpgrade golang-raceUpgrade golang-github-kr-pty-develUpgrade golang-tests | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golistUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-docsUpgrade golang-binUpgrade golang-sharedUpgrade golist-debuginfoUpgrade golang-testsUpgrade golist-debugsourceUpgrade golang-github-cpuguy83-md2manUpgrade golang-raceUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-srcUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-miscUpgrade golang | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade buildah-testsUpgrade git-lfs-debuginfoUpgrade grafanaUpgrade podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netns-debugsourceUpgrade runc-debugsourceUpgrade podman-debuginfoUpgrade skopeo-testsUpgrade udicaUpgrade grafana-pcp-debuginfoUpgrade aardvark-dnsUpgrade crunUpgrade libslirp-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade delveUpgrade slirp4netns-debuginfoUpgrade python3-criuUpgrade git-lfsUpgrade podman-remoteUpgrade criu-libs-debuginfoUpgrade grafana-pcpUpgrade crun-debugsourceUpgrade podman-dockerUpgrade runcUpgrade golang-binUpgrade podman-plugins-debuginfoUpgrade go-toolsetUpgrade toolbox-debugsourceUpgrade containernetworking-pluginsUpgrade toolbox-debuginfoUpgrade container-selinuxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade toolbox-testsUpgrade golang-testsUpgrade conmon-debuginfoUpgrade critUpgrade runc-debuginfoUpgrade criu-debugsourceUpgrade criu-develUpgrade podman-debugsourceUpgrade podman-remote-debuginfoUpgrade golang-docsUpgrade podman-gvproxy-debuginfoUpgrade golang-srcUpgrade podman-catatonit-debuginfoUpgrade libslirp-develUpgrade criu-debuginfoUpgrade fuse-overlayfsUpgrade containers-commonUpgrade buildahUpgrade grafana-debuginfoUpgrade golang-miscUpgrade criu-libsUpgrade git-lfs-debugsourceUpgrade slirp4netnsUpgrade skopeo-debuginfoUpgrade netavarkUpgrade libslirpUpgrade golang-raceUpgrade golangUpgrade fuse-overlayfs-debuginfoUpgrade crun-debuginfoUpgrade conmon-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-debugsourceUpgrade podman-testsUpgrade toolboxUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debuginfoUpgrade buildah-tests-debuginfoUpgrade skopeoUpgrade python3-podmanUpgrade podman-gvproxyUpgrade delve-debugsourceUpgrade cockpit-podmanUpgrade conmonUpgrade criuUpgrade buildah-debugsourceUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade podman-catatonitUpgrade delve-debuginfo | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade go-toolsetUpgrade skopeo-testsUpgrade libslirpUpgrade podman-pluginsUpgrade grafanaUpgrade criu-libsUpgrade python3-criuUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade podman-testsUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade conmonUpgrade golang-srcUpgrade delveUpgrade criu-develUpgrade crunUpgrade git-lfsUpgrade libslirp-develUpgrade container-selinuxUpgrade buildahUpgrade podman-remoteUpgrade grafana-pcpUpgrade containernetworking-pluginsUpgrade podman-dockerUpgrade buildah-testsUpgrade skopeoUpgrade golang-testsUpgrade udicaUpgrade golang-docsUpgrade python3-podmanUpgrade podman-catatonitUpgrade golangUpgrade fuse-overlayfsUpgrade golang-miscUpgrade critUpgrade podmanUpgrade runcUpgrade netavarkUpgrade golang-binUpgrade criuUpgrade aardvark-dnsUpgrade golang-race | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade cockpit-podmanUpgrade git-lfs-debuginfoUpgrade runc-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade golang-srcUpgrade netavarkUpgrade buildah-debuginfoUpgrade golang-miscUpgrade aardvark-dnsUpgrade criuUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade buildah-testsUpgrade podmanUpgrade golangUpgrade containernetworking-pluginsUpgrade conmon-debugsourceUpgrade criu-debugsourceUpgrade buildahUpgrade oci-seccomp-bpf-hookUpgrade python3-podmanUpgrade conmon-debuginfoUpgrade crun-debugsourceUpgrade podman-remoteUpgrade containers-commonUpgrade golang-raceUpgrade podman-remote-debuginfoUpgrade podman-catatonitUpgrade delve-debuginfoUpgrade criu-libsUpgrade buildah-tests-debuginfoUpgrade grafana-debuginfoUpgrade golang-testsUpgrade crun-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade criu-debuginfoUpgrade skopeo-debugsourceUpgrade toolbox-testsUpgrade grafana-pcpUpgrade slirp4netns-debuginfoUpgrade toolboxUpgrade podman-dockerUpgrade grafana-pcp-debuginfoUpgrade podman-catatonit-debuginfoUpgrade slirp4netnsUpgrade runcUpgrade git-lfs-debugsourceUpgrade udicaUpgrade podman-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade crunUpgrade libslirp-debugsourceUpgrade python3-criuUpgrade golang-binUpgrade criu-develUpgrade libslirpUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade delve-debugsourceUpgrade podman-testsUpgrade podman-gvproxyUpgrade golang-docsUpgrade libslirp-debuginfoUpgrade podman-pluginsUpgrade container-selinuxUpgrade git-lfsNo solution existsUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netns-debugsourceUpgrade conmonUpgrade containernetworking-plugins-debugsourceUpgrade critUpgrade criu-libs-debuginfoUpgrade skopeoUpgrade buildah-debugsourceUpgrade toolbox-debugsourceUpgrade delveUpgrade podman-gvproxy-debuginfoUpgrade skopeo-debuginfoUpgrade go-toolsetUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade skopeo-testsUpgrade grafana | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade libslirpUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade git-lfs-debugsourceUpgrade delve-debugsourceUpgrade golang-raceUpgrade criu-develUpgrade grafana-pcp-debuginfoUpgrade libslirp-debugsourceUpgrade criuUpgrade delveUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade critUpgrade python3-criuUpgrade delve-debuginfoUpgrade criu-debuginfoUpgrade libslirp-debuginfoUpgrade libslirp-develUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade criu-libs-debuginfoUpgrade git-lfsUpgrade golangUpgrade git-lfs-debuginfoUpgrade grafana-debuginfoUpgrade golang-binUpgrade go-toolsetUpgrade grafanaUpgrade grafana-pcpUpgrade criu-libs | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 9.0.6 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-opensslUpgrade go1.17-docUpgrade go1.18-docUpgrade go1.18Upgrade go1.18-raceUpgrade go1.18-openssl-docUpgrade go1.17-raceUpgrade go1.17Upgrade go1.18-openssl-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.16-goUpgrade golang-1.16-srcUpgrade golang-1.18-goUpgrade golang-1.18Upgrade golang-1.13-goUpgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.13-srcUpgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16 (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub